W32.Gibe.C@mm is a variant of
W32.Gibe.B@mm. The worm attempts to spread through Email, KaZaA, and IRC. It uses Microsoft Outlook to email itself to all the contacts in the Windows Address Book. W32.Gibe.C@mm will display a message titled, Microsoft Internet Update Pack," if the computer has already been infected with this worm.
The email message has a randomly chosen subject, message, and attachment, which will have either a .exe or .zip file extension. W32.Gibe.C@mm may send itself to some specified new groups, whose URL are carried by the worm.
This threat is written in Microsoft Visual Basic (VB). The VB run-time libraries must be installed on the computer to execute.
NOTE: Definitions dated prior to March 19th, 2003 may detect this threat as W32.HLLW.Begbie@mm.
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.
